Critical severity9.9NVD Advisory· Published Sep 15, 2026

CVE-2026-91001

Description

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vivi Xray/Xray S CVEreferences
Dlink/DI-8400llm-create
Range: 16.07

Patches

Vulnerability mechanics

References

github.com/Vivi-Xray/Xray-s-cve-/blob/main/ddns_asp/ddns_asp.pynvd
github.com/Vivi-Xray/Xray-s-cve-/tree/main/ddns_aspnvd
vuldb.com/cve/CVE-2026-91001nvd
vuldb.com/submit/931642nvd
vuldb.com/vuln/403582nvd
vuldb.com/vuln/403582/ctinvd
www.dlink.comnvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000